CVE-2024-55272

CVE-2024-55272 is a vulnerability in Brainasoft Braina version 2.8 that enables a remote attacker to obtain sensitive information through the chat window function. Classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), it has a CVSS v3.1 base score of 7.5, reflecting high confidentiality impact with network accessibility, low attack complexity, no privileges required, no user interaction, and unchanged scope.

A remote attacker with no authentication or privileges can exploit this issue over the network by targeting the chat window function, potentially extracting sensitive information from the affected system without impacting integrity or availability.

For mitigation details, refer to the advisory at https://github.com/soursec/CVEs/tree/main/CVE-2024-55272, published on 2025-02-07. Security practitioners should check this source for any recommended patches or workarounds specific to Braina v2.8.